ConfigServer Community Forum

Does csf look at csf.tempban before it blocks an IP? I sometimes get a dozes emails about an IP that is blocked with too many connections. And it is then also listed a dozen times in csf.tempban.

csf.tempban is a temporary file that lfd uses to keep track of the temporary bans it has in place.

chirpy wrote:csf.tempban is a temporary file that lfd uses to keep track of the temporary bans it has in place.

I understand, but i get multiple mails every minute while it's already blocked. Probably because the too many connection are still timing out?

I would imagine that that is the reason for the repeated blocks. It will probably depend on the type of connection states that are contributing to the block limit being reached for the IP.

Maybe it's wise to check csf.tempban before temporary banning it again?